Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: H2LBdv6gaaOjPf2L12OfZhzG9YktDclUCZaxag2kpPg=
Subject key identifier: 7B:02:7B:60:AA:73:0D:2A:C4:DF:72:3E:03:94:74:7C:6B:17:E2:82
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 01A13823E9DB7134C7F050430EBB812C613E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 085E
Signing time: Wed 14 Oct 2026 02:00:39 +0000
Manifest this update: Wed 14 Oct 2026 02:00:39 +0000
Manifest next update: Thu 15 Oct 2026 02:00:39 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: DasMqMbWq86MQlv4/w0Z18hgoFiF9IUrjKld2yuKcJI=)
2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:23:e9:db:71:34:c7:f0:50:43:0e:bb:81:2c:61:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Oct 14 02:00:39 2026 GMT
Not After : Oct 15 02:00:39 2026 GMT
Subject: CN=7b027b60aa730d2ac4df723e0394747c6b17e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:42:33:a5:04:e5:36:d9:47:f5:dc:97:02:
27:f2:05:7a:1f:70:1b:b7:6c:e9:6a:ee:73:23:49:
82:a5:7a:8d:7e:4f:a2:ba:ce:33:b1:ce:de:b5:9e:
58:1e:1b:cb:0c:3a:bc:a8:b2:4d:13:df:b2:b0:63:
f0:4f:0b:d8:7a:4a:e1:ff:db:86:bc:2a:5f:05:d9:
22:8d:db:3c:7d:42:1b:f8:a4:92:47:df:3e:15:e1:
f4:dc:91:a1:af:9d:28:80:be:4b:e8:9b:b0:3c:11:
f7:0e:40:1b:a4:2f:5a:d7:5e:30:83:1d:b6:eb:a2:
e5:17:0c:f8:db:88:db:c2:a8:7c:84:bc:80:3c:db:
bd:f6:2e:e1:b1:ea:1c:c5:1f:4d:91:1b:30:b4:f3:
ca:5b:35:f9:a5:69:10:ef:54:24:42:cb:9d:d7:4c:
83:16:f7:a0:9f:16:2d:a8:b9:2e:6c:9a:10:7b:ec:
33:4f:e1:0f:c6:c7:cb:6f:97:91:02:34:b3:97:23:
94:38:28:27:43:b4:8a:f1:d4:2b:0a:fd:70:28:9b:
c3:91:d5:6f:5f:03:77:75:0e:ea:3c:ca:42:8b:fe:
0c:39:75:69:30:a7:5d:76:ce:df:ef:c8:e4:aa:05:
e7:49:09:90:1c:81:b8:e8:be:19:7f:14:23:83:5f:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:02:7B:60:AA:73:0D:2A:C4:DF:72:3E:03:94:74:7C:6B:17:E2:82
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:75:1d:a8:0a:ce:6f:d0:05:b4:23:66:2c:1f:ca:20:fe:cf:
9a:58:88:58:4d:05:c7:7d:68:1a:1a:81:b6:e3:6b:1f:fe:ef:
3d:85:bd:f2:55:3f:fb:e6:02:48:28:e0:0e:16:43:b6:51:41:
65:da:f0:3e:45:6f:6c:38:b7:5f:29:1d:65:19:25:4b:71:65:
4d:a1:06:6e:50:e6:1b:fa:f7:9d:a6:09:50:1f:ce:67:3a:de:
a4:b9:ca:c2:eb:16:59:47:7e:f8:48:4a:74:64:32:59:1b:85:
6c:d7:81:b2:58:f1:aa:d6:91:a8:60:e9:3d:68:70:34:33:64:
23:68:7f:63:9f:f1:f5:0d:d6:e6:b8:b0:c7:bf:ec:f5:e6:65:
83:96:7d:05:a0:71:24:fe:72:bb:02:e0:94:7d:1b:cc:20:47:
6e:fc:66:a4:81:cb:25:3f:33:4a:7b:25:71:74:43:ff:bf:eb:
b9:e3:c7:d3:00:fb:62:7d:bc:bb:ad:15:58:7d:a3:e4:c9:a3:
a1:15:cd:1a:25:c4:00:a4:9f:d7:53:a0:65:13:17:e5:90:b0:
5b:b7:df:50:e4:ba:79:db:0a:82:2a:15:41:10:40:d1:82:b9:
23:7f:c5:41:25:b3:16:93:9c:0a:a4:67:53:13:5f:c9:8e:75:
02:c0:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:18:19 2026 by rpki-client